{
  "affected": [
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.1.5"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.AspNetCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2022-24464"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2022-10-21T20:32:34Z",
    "nvd_published_at": "2022-03-09T17:15:00Z",
    "severity": "HIGH"
  },
  "details": "Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0, and .NET CORE 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nMicrosoft is aware of a Denial of Service vulnerability, which exists in .NET 6.0, .NET 5.0, and .NET CORE 3.1 when parsing certain types of http form requests.\n\n### Affected Software\n\n* Any .NET 6.0 application running on .NET 6.0.2 or lower\n* Any .NET 5.0 application running on .NET 5.0.14 or lower\n* Any .NET Core 3.1 application running on .NET Core 3.1.22 or lower \n\n### Patches\nTo fix the issue, please install the latest version of .NET 6.0 or .NET 5.0 or .NET Core 3.1.. If you have installed one or more .NET SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET  SDKs.\n\n* If you\u0027re using .NET Core 6.0, you should download and install Runtime 6.0.3 or SDK 6.0.201 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.\n\n* If you\u0027re using .NET 5.0, you should download and install Runtime 5.0.15 or SDK 5.0.406 (for Visual Studio 2019 v16.11) or SDK 5.0.212 (for Visual Studio 2011 v16.9) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n\n* If you\u0027re using .NET Core 3.1, you should download and install Runtime 3.1.23 or SDK 3.1.417 (for Visual Studio 2019 v16.7.26) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n.NET 6.0 and .NET 5.0 updates are also available from Microsoft Update. To access this either type \"Check for updates\" in your Windows search, or open Settings, choose Update \u0026 Security and then click Check for Updates.\n\n.NET 6.0 and .NET 5.0 and, .NET Core 3.1 updates are also available from Microsoft Update. To access this either type \"Check for updates\" in your Windows search, or open Settings, choose Update \u0026 Security and then click Check for Updates.\n\n#### Other Details\n\n- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/212\n- An Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/40598\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/ CVE-2022-24464",
  "id": "GHSA-cw98-9j8w-wxv9",
  "modified": "2022-10-21T20:32:34Z",
  "published": "2022-10-21T20:32:34Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
    },
    {
      "type": "WEB",
      "url": "https://github.com/dotnet/announcements/issues/212"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24464"
    },
    {
      "type": "WEB",
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": ".NET Denial of Service Vulnerability"
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.417 and .NET Runtime 3.1.23.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0827",
        "url": "https://access.redhat.com/errata/RHSA-2022:0827"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1879225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0827.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET Core 3.1 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:01+00:00",
      "generator": {
        "date": "2024-11-06T00:33:01+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0827",
      "initial_release_date": "2022-03-10T16:06:18+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:06:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:06:18+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:01+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder (v. 8)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder (v. 8)",
                  "product_id": "CRB-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-3.1@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-3.1@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet3.1-debugsource@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-3.1-debuginfo@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-3.1-debuginfo@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-3.1-debuginfo@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-3.1-debuginfo@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet3.1-debuginfo@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-3.1-source-built-artifacts@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet3.1-0:3.1.417-1.el8_5.src",
                "product": {
                  "name": "dotnet3.1-0:3.1.417-1.el8_5.src",
                  "product_id": "dotnet3.1-0:3.1.417-1.el8_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet3.1@3.1.417-1.el8_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-0:3.1.417-1.el8_5.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src"
        },
        "product_reference": "dotnet3.1-0:3.1.417-1.el8_5.src",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-0:3.1.417-1.el8_5.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src"
        },
        "product_reference": "dotnet3.1-0:3.1.417-1.el8_5.src",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-8927",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "discovery_date": "2020-09-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1879225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a \"one-shot\" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brotli: buffer overflow when input chunk is larger than 2GiB",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1879225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
        }
      ],
      "release_date": "2020-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0827"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by using Streaming API instead of the One-Shot API and imposing chunk size limitations.",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brotli: buffer overflow when input chunk is larger than 2GiB"
    },
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0827"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0827"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 6.0.103 and .NET Runtime 6.0.3.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0826",
        "url": "https://access.redhat.com/errata/RHSA-2022:0826"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0826.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 6.0 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:32:53+00:00",
      "generator": {
        "date": "2024-11-06T00:32:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0826",
      "initial_release_date": "2022-03-10T16:06:50+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:06:50+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:06:50+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:32:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-host-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-host-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-host-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-host-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-host-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-host-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet6.0-0:6.0.103-4.el8_5.src",
                "product": {
                  "name": "dotnet6.0-0:6.0.103-4.el8_5.src",
                  "product_id": "dotnet6.0-0:6.0.103-4.el8_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0@6.0.103-4.el8_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-host-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-host-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-host-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-0:6.0.103-4.el8_5.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src"
        },
        "product_reference": "dotnet6.0-0:6.0.103-4.el8_5.src",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:50+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0826"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:50+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0826"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 6.0 is now available for .NET on Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 6.0.103 and .NET Runtime 6.0.3.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0832",
        "url": "https://access.redhat.com/errata/RHSA-2022:0832"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0832.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:12+00:00",
      "generator": {
        "date": "2024-11-06T00:33:12+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0832",
      "initial_release_date": "2022-03-10T16:13:12+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:13:12+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:13:12+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:12+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-dotNET-6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-dotNET-6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-dotNET-6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": ".NET Core on Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-aspnetcore-runtime-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-aspnetcore-targeting-pack-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-apphost-pack-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-host@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-hostfxr-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-runtime-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-sdk-6.0@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-targeting-pack-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-templates-6.0@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-netstandard-targeting-pack-2.1@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-debuginfo@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
                "product": {
                  "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
                  "product_id": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet@6.0.103-3.el7_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:13:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0832"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:13:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0832"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 5.0 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.212 and .NET Runtime 5.0.15.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0828",
        "url": "https://access.redhat.com/errata/RHSA-2022:0828"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1879225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0828.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:24+00:00",
      "generator": {
        "date": "2024-11-06T00:33:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0828",
      "initial_release_date": "2022-03-10T16:12:40+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:12:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:12:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-dotNET-5.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:5.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-dotNET-5.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:5.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-dotNET-5.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:5.0::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": ".NET Core on Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-aspnetcore-runtime-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-aspnetcore-targeting-pack-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-apphost-pack-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-host@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-hostfxr-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-runtime-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-sdk-5.0@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-targeting-pack-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-templates-5.0@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-netstandard-targeting-pack-2.1@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-debuginfo@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
                "product": {
                  "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
                  "product_id": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet@5.0.212-1.el7_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-8927",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "discovery_date": "2020-09-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1879225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a \"one-shot\" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brotli: buffer overflow when input chunk is larger than 2GiB",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1879225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
        }
      ],
      "release_date": "2020-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0828"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by using Streaming API instead of the One-Shot API and imposing chunk size limitations.",
          "product_ids": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brotli: buffer overflow when input chunk is larger than 2GiB"
    },
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0828"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0828"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.417 and .NET Runtime 3.1.23.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0829",
        "url": "https://access.redhat.com/errata/RHSA-2022:0829"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1879225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0829.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:09+00:00",
      "generator": {
        "date": "2024-11-06T00:33:09+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0829",
      "initial_release_date": "2022-03-10T16:12:05+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:12:05+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:12:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:09+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-dotNET-3.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:3.1::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-dotNET-3.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:3.1::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-dotNET-3.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:3.1::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": ".NET Core on Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-aspnetcore-runtime-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-aspnetcore-targeting-pack-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-apphost-pack-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-host@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-hostfxr-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-runtime-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-sdk-3.1@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-targeting-pack-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-templates-3.1@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-netstandard-targeting-pack-2.1@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-debuginfo@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
                "product": {
                  "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
                  "product_id": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet@3.1.417-1.el7_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-8927",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "discovery_date": "2020-09-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1879225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a \"one-shot\" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brotli: buffer overflow when input chunk is larger than 2GiB",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1879225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
        }
      ],
      "release_date": "2020-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0829"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by using Streaming API instead of the One-Shot API and imposing chunk size limitations.",
          "product_ids": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brotli: buffer overflow when input chunk is larger than 2GiB"
    },
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0829"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0829"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.212 and .NET Runtime 5.0.15.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0830",
        "url": "https://access.redhat.com/errata/RHSA-2022:0830"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1879225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0830.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 5.0 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:18+00:00",
      "generator": {
        "date": "2024-11-06T00:33:18+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0830",
      "initial_release_date": "2022-03-10T16:05:56+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:05:56+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:05:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:18+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder (v. 8)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder (v. 8)",
                  "product_id": "CRB-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-5.0@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-5.0@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet5.0-debugsource@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-5.0-debuginfo@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-5.0-debuginfo@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-5.0-debuginfo@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-5.0-debuginfo@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet5.0-debuginfo@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-5.0-source-built-artifacts@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet5.0-0:5.0.212-1.el8_5.src",
                "product": {
                  "name": "dotnet5.0-0:5.0.212-1.el8_5.src",
                  "product_id": "dotnet5.0-0:5.0.212-1.el8_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet5.0@5.0.212-1.el8_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-0:5.0.212-1.el8_5.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src"
        },
        "product_reference": "dotnet5.0-0:5.0.212-1.el8_5.src",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-0:5.0.212-1.el8_5.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src"
        },
        "product_reference": "dotnet5.0-0:5.0.212-1.el8_5.src",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-8927",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "discovery_date": "2020-09-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1879225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a \"one-shot\" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brotli: buffer overflow when input chunk is larger than 2GiB",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1879225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
        }
      ],
      "release_date": "2020-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:05:56+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0830"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by using Streaming API instead of the One-Shot API and imposing chunk size limitations.",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brotli: buffer overflow when input chunk is larger than 2GiB"
    },
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:05:56+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0830"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:05:56+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0830"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202203-0039",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "35"
      },
      {
        "model": "visual studio 2019",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.7.26"
      },
      {
        "model": ".net core",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "3.1"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.11.0"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.8.0"
      },
      {
        "model": "visual studio 2022",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "17.0.7"
      },
      {
        "model": "visual studio 2019",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.6.4"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "36"
      },
      {
        "model": ".net",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "6.0.0"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.7.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "34"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.0"
      },
      {
        "model": ".net",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "5.0"
      },
      {
        "model": "visual studio 2019",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.10.4"
      },
      {
        "model": "visual studio 2019",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.8.7"
      },
      {
        "model": ".net",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "6.0.2"
      },
      {
        "model": "visual studio 2019",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.11.11"
      },
      {
        "model": ".net core",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "3.1.22"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.10.0"
      },
      {
        "model": ".net",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "5.0.14"
      },
      {
        "model": "visual studio 2019",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.9.18"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.9.0"
      },
      {
        "model": "visual studio 2022",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "17.0"
      },
      {
        "model": "microsoft visual studio",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": "2019   16.9 (includes 16.0 - 16.8)"
      },
      {
        "model": "microsoft visual studio",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": "2019   16.11 (includes 16.0 - 16.10)"
      },
      {
        "model": "microsoft visual studio",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": "2019   16.7 (includes 16.0 - 16.6)"
      },
      {
        "model": ".net",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": null
      },
      {
        "model": "microsoft visual studio",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": "2022   17.0"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24464"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "5.0.14",
                "versionStartIncluding": "5.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "6.0.2",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "3.1.22",
                "versionStartIncluding": "3.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.7.26",
                "versionStartIncluding": "16.7.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.9.18",
                "versionStartIncluding": "16.9.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "16.6.4",
                "versionStartIncluding": "16.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "16.8.7",
                "versionStartIncluding": "16.8.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "16.10.4",
                "versionStartIncluding": "16.10.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.11.11",
                "versionStartIncluding": "16.11.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "17.0.7",
                "versionStartIncluding": "17.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-24464"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Red Hat",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-24464",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2022-24464",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "MEDIUM",
            "trust": 1.8,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2022-24464",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "OTHER",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "JVNDB-2022-001413",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2022-24464",
            "trust": 1.8,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202203-701",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-701"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24464"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": ".NET and Visual Studio Denial of Service Vulnerability. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=====================================================================\n                   Red Hat Security Advisory\n\nSynopsis:          Important: .NET 6.0 on RHEL 7 security and bugfix update\nAdvisory ID:       RHSA-2022:0832-01\nProduct:           .NET Core on Red Hat Enterprise Linux\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2022:0832\nIssue date:        2022-03-10\nCVE Names:         CVE-2022-24464 CVE-2022-24512 \n=====================================================================\n\n1. Summary:\n\nAn update for .NET 6.0 is now available for .NET on Red Hat Enterprise\nLinux 7. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64\n.NET Core on Red Hat Enterprise Linux Server (v. 7) - x86_64\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7) - x86_64\n\n3. Description:\n\n.NET is a managed-software framework. It implements a subset of the .NET\nframework APIs and several new APIs, and it includes a CLR implementation. \n\nNew versions of .NET that address security vulnerabilities are now\navailable. The updated versions are .NET SDK 6.0.103 and .NET Runtime\n6.0.3. \n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n2061847 - CVE-2022-24464 dotnet: ASP.NET Denial of Service via FormPipeReader\n2061854 - CVE-2022-24512 dotnet: double parser stack buffer overrun\n\n6. Package List:\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nrh-dotnet60-dotnet-6.0.103-3.el7_9.src.rpm\n\nx86_64:\nrh-dotnet60-aspnetcore-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-apphost-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-debuginfo-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-host-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-hostfxr-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-templates-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-netstandard-targeting-pack-2.1-6.0.103-3.el7_9.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-dotnet60-dotnet-6.0.103-3.el7_9.src.rpm\n\nx86_64:\nrh-dotnet60-aspnetcore-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-apphost-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-debuginfo-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-host-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-hostfxr-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-templates-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-netstandard-targeting-pack-2.1-6.0.103-3.el7_9.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-dotnet60-dotnet-6.0.103-3.el7_9.src.rpm\n\nx86_64:\nrh-dotnet60-aspnetcore-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-apphost-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-debuginfo-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-host-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-hostfxr-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-templates-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-netstandard-targeting-pack-2.1-6.0.103-3.el7_9.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2022-24464\nhttps://access.redhat.com/security/cve/CVE-2022-24512\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2022 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\n5npIufme4D0=\n=V/tf\n-----END PGP SIGNATURE-----\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://listman.redhat.com/mailman/listinfo/rhsa-announce\n. 8) - aarch64, s390x, x86_64\n\n3",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-24464"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-24464",
        "trust": 3.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413",
        "trust": 0.8
      },
      {
        "db": "PACKETSTORM",
        "id": "166271",
        "trust": 0.7
      },
      {
        "db": "CS-HELP",
        "id": "SB2022031027",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2022030847",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2022.1015",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-701",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "166260",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "166270",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "166269",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "166267",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "166266",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-701"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24464"
      }
    ]
  },
  "id": "VAR-202203-0039",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.21178882
  },
  "last_update_date": "2023-12-14T20:38:04.833000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": ".NET\u00a0and\u00a0Visual\u00a0Studio\u00a0Denial\u00a0of\u00a0Service\u00a0Vulnerability Security Update Guide",
        "trust": 0.8,
        "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2022-24464"
      },
      {
        "title": "Microsoft .NET Core  and Microsoft Visual Studio Enter the fix for the verification error vulnerability",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=185198"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-701"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      },
      {
        "problemtype": "Lack of information (CWE-noinfo) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24464"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.2,
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/cve-2022-24464"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-24464"
      },
      {
        "trust": 1.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-24464"
      },
      {
        "trust": 0.8,
        "url": "https://www.ipa.go.jp/security/ciadr/vul/20220309-ms.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.jpcert.or.jp/at/2022/at220007.html"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/cve/cve-2022-24512"
      },
      {
        "trust": 0.6,
        "url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.6,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-24512"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/os2q4nprsarp7ghlkfliyhfopsydo6mk/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/mqlm7abvcyjlf6jrpf3m3ebxw63gnc27/"
      },
      {
        "trust": 0.6,
        "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2022-24464"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/mrgspxmzy4rm2l35fyhcxbfrolc23b2v/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4togtz2zwdh662znffszvl3m5ajxv6jf/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/cijgcvklhvnlfbteyjgws43qg5dyjfbl/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/zxeq3gqvela2t4hnzg7vpms2hdvxmjrg/"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2022030847"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2022.1015"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-24464/"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/166271/red-hat-security-advisory-2022-0826-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/microsoft-net-vulnerabilities-of-march-2022-37733"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/microsoft-visual-studio-vulnerabilities-of-march-2022-37737"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2022031027"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2020-8927"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-8927"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0832"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0826"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0827"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0828"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0829"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0830"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-701"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24464"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-701"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24464"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-03-16T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "date": "2022-03-11T16:10:28",
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "date": "2022-03-11T16:33:33",
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "date": "2022-03-11T16:33:16",
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "date": "2022-03-11T16:33:04",
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "date": "2022-03-11T16:31:42",
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "date": "2022-03-11T16:31:28",
        "db": "PACKETSTORM",
        "id": "166266"
      },
      {
        "date": "2022-03-08T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202203-701"
      },
      {
        "date": "2022-03-09T17:15:00",
        "db": "NVD",
        "id": "CVE-2022-24464"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-03-16T08:17:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      },
      {
        "date": "2023-06-30T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202203-701"
      },
      {
        "date": "2023-12-13T16:15:00",
        "db": "NVD",
        "id": "CVE-2022-24464"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-701"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": ".NET\u00a0 and \u00a0Microsoft\u00a0Visual\u00a0Studio\u00a0 Denial of service in Japan \u00a0(DoS)\u00a0 Vulnerability",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001413"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "input validation error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-701"
      }
    ],
    "trust": 0.6
  }
}

{
  "GSD": {
    "alias": "CVE-2022-24464",
    "description": ".NET and Visual Studio Denial of Service Vulnerability.",
    "id": "GSD-2022-24464",
    "references": [
      "https://access.redhat.com/errata/RHSA-2022:0832",
      "https://access.redhat.com/errata/RHSA-2022:0830",
      "https://access.redhat.com/errata/RHSA-2022:0829",
      "https://access.redhat.com/errata/RHSA-2022:0828",
      "https://access.redhat.com/errata/RHSA-2022:0827",
      "https://access.redhat.com/errata/RHSA-2022:0826",
      "https://linux.oracle.com/cve/CVE-2022-24464.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-24464"
      ],
      "details": ".NET and Visual Studio Denial of Service Vulnerability",
      "id": "GSD-2022-24464",
      "modified": "2023-12-13T01:19:43.139561Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2022-24464",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": ".NET 6.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET 5.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "5.0.0",
                          "version_value": "5.0.15"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET Core 3.1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "3.1",
                          "version_value": "3.1.23"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.7 (includes 16.0 \u2013 16.6)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.0.0",
                          "version_value": "16.7.26"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "15.0.0",
                          "version_value": "16.9.18"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.11.0",
                          "version_value": "16.11.11"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2022 version 17.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "17.0.0",
                          "version_value": "17.0.7"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": ".NET and Visual Studio Denial of Service Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Denial of Service"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24464",
            "refsource": "MISC",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24464"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-arm",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "772479dc-e713-47ad-9c5f-d0e586b47cda"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "f8a94969-ce4e-438c-9dcc-7b0f2b49f96b"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "1ed395f1-d18b-46a8-bc70-7a18973d8c36"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "a4007673-03e2-4de5-a064-14ec5631eaec"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "caa2e258-c62f-45d9-a50d-e513c708dcb2"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.linux-x64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "e425ac78-59cb-4906-9329-e7801d445604"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "cb1a20d1-bdc6-4e3c-9dfd-39f2bac507fe"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.osx-x64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "655192dd-0c54-4896-a869-202a985199a3"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-arm",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "7e937712-0bd6-481b-b60f-1c34db12f913"
        },
        {
          "affected_range": "[3.1.5,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.1.5 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.1.5, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-arm64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "fd0970f3-4e58-4111-9e96-16d64858cd0b"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-x64",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "bb9c5e78-0838-4295-a1e2-5bdae3368be8"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-10-21",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "GHSA-cw98-9j8w-wxv9",
            "CVE-2022-24464"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.AspNetCore.App.Runtime.win-x86",
          "pubdate": "2022-10-21",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": ".NET Denial of Service Vulnerability",
          "urls": [
            "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-cw98-9j8w-wxv9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://github.com/dotnet/announcements/issues/212",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464",
            "https://github.com/advisories/GHSA-cw98-9j8w-wxv9"
          ],
          "uuid": "3053cf3f-5b7b-4f21-a5f4-3c414d0fef13"
        },
        {
          "affected_range": "[5.0,5.0.14],[6.0.0,6.0.2]",
          "affected_versions": "All versions starting from 5.0 up to 5.0.14, all versions starting from 6.0.0 up to 6.0.2",
          "cvss_v2": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-05-12",
          "description": ".NET and Visual Studio Denial of Service Vulnerability.",
          "fixed_versions": [],
          "identifier": "CVE-2022-24464",
          "identifiers": [
            "CVE-2022-24464"
          ],
          "not_impacted": "",
          "package_slug": "nuget/System.Text.Encodings.Web",
          "pubdate": "2022-03-09",
          "solution": "Unfortunately, there is no solution available yet.",
          "title": "Uncontrolled Resource Consumption",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24464"
          ],
          "uuid": "581e3ceb-30f0-4898-bd12-05b5f2c6ff98"
        }
      ]
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D986C83E-F055-4861-B3FC-D1AE2662A826",
                    "versionEndIncluding": "5.0.14",
                    "versionStartIncluding": "5.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9C933FD8-CBE5-43C7-873A-CC2C47E2BF3A",
                    "versionEndIncluding": "6.0.2",
                    "versionStartIncluding": "6.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EB57B616-F5BD-47B7-BBD0-AF58976CEE10",
                    "versionEndIncluding": "3.1.22",
                    "versionStartIncluding": "3.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A6222A0C-EC9B-4AB2-A89F-5D62B381A212",
                    "versionEndIncluding": "16.6.4",
                    "versionStartIncluding": "16.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "367AC9B2-D639-40F6-93FB-822F73E65C30",
                    "versionEndExcluding": "16.7.26",
                    "versionStartIncluding": "16.7.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AC9599DF-664B-4630-9FCD-7FCD846728A1",
                    "versionEndIncluding": "16.8.7",
                    "versionStartIncluding": "16.8.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4338A4F9-0FE2-40F4-B184-86B9F5EF1EED",
                    "versionEndExcluding": "16.9.18",
                    "versionStartIncluding": "16.9.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7B6E2777-4D9B-4710-9575-250B04E1AE0C",
                    "versionEndIncluding": "16.10.4",
                    "versionStartIncluding": "16.10.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F1265006-B9CB-4E89-B6E8-F9EC1D6C7405",
                    "versionEndExcluding": "16.11.11",
                    "versionStartIncluding": "16.11.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C72810F-D156-49CE-A325-7E6A63C9E4A3",
                    "versionEndExcluding": "17.0.7",
                    "versionStartIncluding": "17.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                    "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": ".NET and Visual Studio Denial of Service Vulnerability"
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad de Denegaci\u00f3n de Servicio en .NET y Visual Studio"
          }
        ],
        "id": "CVE-2022-24464",
        "lastModified": "2023-12-13T16:15:17.140",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "secure@microsoft.com",
              "type": "Primary"
            }
          ]
        },
        "published": "2022-03-09T17:15:14.277",
        "references": [
          {
            "source": "secure@microsoft.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24464"
          }
        ],
        "sourceIdentifier": "secure@microsoft.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}